Abstract: An apparatus for controlling devices in one or more home networks is provided. The apparatus includes an authentication unit, a control message generation unit, a control message transmission unit, a response message reception unit, and an information management unit. The authentication unit performs authentication with one or more relay devices each connected to a plurality of devices through a network. The control message generation unit generates a control message in response to a user input. The control message transmission unit transmits the generated control message to a device selected by the user from among the plurality of devices. The response message reception unit receives a response message responding to the transmitted control message. The information management unit manages information about the relay devices and the plurality of devices.

Abstract: Methods and apparatus are provided for securely inputting highly confidential information, exchanging the information via a network, and securely reflecting the information in a computer, without the information being stolen by malicious software. Upon a transfer of encrypted information from a server to a computer, the transferred information is stored in a memory of the computer and the computer is switched to a suspended state and immediately thereafter returns to the previous state to be shifted to under the control of a BIOS. The information stored in the memory is decrypted and processed there. Processing information generated based on the processed information is then encrypted and it is transferred to the server after the computer is switched to under the control of the operating system.

Abstract: A communication device for transmitting data to a communication partner device includes a transmitter for transmitting transmit data to the communication partner device, a determiner for determining a check value from the transmit data in accordance with a determination specification, a receiver for receiving a verification value from the communication partner device, and a checker configured to compare the check value with the verification value and to provide a fault indication signal as a function of the comparison.

Abstract: A certificate server 10, in response to a request from a client 131, extracts certificate data from a certificate database 102 to create a certificate file including print-job log data, and transmit the file to the client 131. The client 131 extracts the print-job log data, creates certificate print data based on the file to transmit the data to a printer 141. The printer 141 prints contents of the received data on paper every page, confirms the completion of a discharge of a printed sheet for each page to transmit a certificate ID code, its page number, an IP address of the printer, the time and date of receiving completion of a discharge, a certificate ID, a paper tray number, and a paper type as a discharge log data to the client 131. The client 131 transmits the received print-job log data and discharge-log data to a log server 15.

Abstract: A video editing device 100 includes a partial digest generation unit 102 acquiring first scene specification information, selecting, from a selection table, one or more pieces of identification information in correspondence with a piece of situation information included in the acquired first scene specification information, extracting one or more pieces of the second scene specification information each specifying a second scene matching a type identified by the selected one or more pieces of the identification information and having a storage time closest to the storage time of the first scene. The video edit device also includes a whole digest generation unit 104 extracting, based on the first scene specification information and the extracted one or more pieces of the second scene specification information, the first scene and the specified one or more second scenes from the video stream, and reproducing the extracted scenes.

Abstract: Embodiments of the present invention provide a compression capability for compressing a CRL, such as an X.509 CRL, stored as a file, data structure or data object in a computer system having a certification authority (CA) and a security client. An exemplary method provides for accessing the CRL contents including a certificate revocation record and performing compression procedure, such as a lossless compression procedure on the contents of the CRL. The compressed CRL contents can be stored in another file, data structure or data object. A request for the compressed CRL is from a security client whereupon the compressed CRL is returned to the security client by transferring the compressed CRL contents to the security client. The security can client un-compress the compressed CRL contents. In some cases the uncompressed CRL contents can be transferred to the security client.

Abstract: A data communication apparatus, performing a secret communication, is provided to reduce a random number generation speed using a plurality of random number generators. The data communication apparatus includes random number generation sections generating random numbers, which are each a multi-level pseudo random number, using predetermined key information includes a multi-level signal modulation section selecting a level, from among multi-levels previously prepared, selected level corresponding to information data and a multi-level sequence, which is composed of a combination of values of the random numbers and generating a multi-level modulated signal including a noise having a predetermined noise level using the selected level. Levels of a multi-level signal are in a range of the noise level, and a signal point allocation is set such that all values which are possibly taken by each of the random numbers are allocated to the plurality of levels of the multi-level signal.

Abstract: A system and method for provisioning digital identity representations (“DIRs”) uses various techniques and structures to ease administration, increase accuracy, and decrease inconsistencies of a digital-identity provisioning system. A system is provided using a common identity data store for both DIR issuance and identity token issuance, decreasing synchronization issues. Various methods are provided for creating new DIRs, notifying principals of available DIRs, and approving issuance of new DIRs.

Abstract: Techniques for validating identities are provided. A sign-on request is authenticated for a given principal. Attributes associated with that principal are acquired from an identity service and compared against local maintained attributes for that principal. If the identity-service acquired attributes match the local attributes, then the principal is validated for access. During principal access, selective events drive updates to the identity-service acquired attributes, and the comparison with the local attributes is performed again to determine whether the validated principal is to be invalidated or is to remain validated.

Abstract: A disclosed network communication device corresponds to IP communications and is capable of performing IPsec communication. The network communication device includes a setting unit configured to obtain and set an operation mode specified by an administrator user; a detecting unit configured to detect a communication error caused by an incorrect portion in an IPsec setting; and a changing unit configured to change the IPsec setting, based on the operation mode set by the setting unit, to correct the incorrect portion or to cancel the IPsec communication, in the event that the communication error is detected.

Abstract: The present disclosure provides a method for scalable anti-replay windowing. According to one exemplary embodiment, the method may include receiving at least one data packet having at least one new sequence number. The method may also include comparing the at least one new sequence number to an anti-replay window configured to prevent packet replay, the anti-replay window having at least one existing sequence number. The method may further include shifting the contents of the anti-replay window by varying the location of a starting index and an ending index. Of course, additional embodiments, variations and modifications are possible without departing from this embodiment.

Abstract: An electronic apparatus includes a first apparatus that carries out a plurality of functions, and a second apparatus that is coupled to the first apparatus. The second apparatus comprises a control unit that includes a processing unit for supplying commands to the first apparatus for carrying out the selected one of the plurality of functions: a display driver for displaying on a display a screen utilized to select one of the plurality of functions; and a memory slot operable to receive a memory stick that includes a key file for activating at least one other function. When the key file is uninstalled, the plurality of functions executable by the first apparatus include basic functions, and alternatively when the key file is installed, the plurality of executable functions include both the basic functions and at least one other function upon the processing unit validating authorization data stored on the key file.

Abstract: An image capture apparatus captures an image, and performs an authentication process with an external device. The image capture apparatus encrypts a captured image to generate an encrypted image if the authentication unit succeeds in performing the authentication process, and stores the encrypted image in a recording medium. The image capture apparatus displays whether the authentication unit succeeded in performing the authentication process, and whether the external device includes key information used in encrypting the captured image.

Abstract: A digital document processing apparatus stores a digital document, an application program used for editing the digital document, where the application program runs on an application platform, and a filter program used for restricting a function executed by the application program. The digital document processing apparatus includes a function determination unit configured to determine whether a function executed by the application program is restricted by the filter program, and a function restricting unit configured to restrict the function executed by the application program using the filter program if the function determination unit determines that the function executed by the application program is restricted by the filter program.

Abstract: Systems and methods for performing explicit delegation with strong authentication are described herein. Systems can include one or more clients, one or more end servers, and one or more gateways intermediate or between the client and the end server. The client may include an explicit strong delegation component that is adapted to strongly authenticate the client to the gateway. The explicit strong delegation component may also explicitly delegate to the gateway a right to authenticate on behalf of the client, and to define a period of time over which the explicit delegation is valid. The system may be viewed as being self-contained, in the sense that the system need not access third-party certificate or key distribution authorities. Finally, the client controls the gateways or end servers to which the gateway may authenticate on the client's behalf.

Abstract: Multiple keys are distributed to multiple clients. The keys provide access to media content. A group of clients are identified to receive substituted media content during a predetermined time period. Modified keys are generated that identify the substituted media content and the predetermined time period. The modified keys are distributed to the group of clients. The modified keys cause the group of clients to receive the substituted media content during the predetermined time period.

Abstract: A method is provided for combining two or more input sequences in a communications system to increase a repetition period of the input sequences in a resource-efficient manner. The method includes a receiving step, a mapping step, and a generating step. The receiving step involves receiving a first number sequence and a second number sequence, each expressed in a Galois field GF[pk]. The mapping step involves mapping the first and second number sequences to a Galois extension field GF[pk+1]. The generating step involves generating an output sequence by combining the first number sequence with the second number sequence utilizing a Galois field multiplication operation in the Galois extension field GF[pk+1]. p is a prime number. k is an integer. pk+1 defines a finite field size of the Galois extension field GF[pk+1].

Abstract: A method of identifying an entry in an entity model as being at least one of potentially private and potentially sensitive is disclosed. The method may include creating an indication related to a specific entry that indicates whether the specific entry is one of potentially personally identifiable and potentially sensitive or both and allowing the indication to be modified to indicate whether the specific entry is one of potentially personally identifiable and potentially sensitive or both.

Abstract: Systems and methods for distributed monitoring of a wireless network using a plurality of wireless client devices in communication with the wireless network.

Abstract: System(s), techniques, and/or method(s) (“tools”) are described that enable a user to elevate his or her rights. The tools may do so by switching a user to an account having higher rights or a different, higher-rights context of a same account. The tools may elevate a user's rights after a user enters a secure access sequence, such as Control+Alt+Delete, clicks on a button, or enters credentials. The tools may also enable a user to identify tasks that need higher rights to be performed by visually correlating graphic indicia with these tasks.